NVD

Id
68468  
Name
CVE-2005-2781  
Description
The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-09-02  
Modified Date
2017-07-10  
Seq
2005-2781  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
353834 68468 CVE-2005-2781 http://fudforum.org/forum/index.php?t=msg&th=5470&start=0&  View
353835 68468 CVE-2005-2781 20050828 FUD Forum < 2.7.1 PHP code injection vurnelability  View
353836 68468 CVE-2005-2781 DSA-1063  View
353837 68468 CVE-2005-2781 20090127 Re: FUD Forum < 2.7.1 PHP code injection vurnelability  View
353838 68468 CVE-2005-2781 14678  View
353839 68468 CVE-2005-2781 fudforum-avatar-file-upload(22076)  View

Related JVN